Two-Factor Authentication (TFA)

Two-Factor Authentication (TFA) with Duo

Two-factor authentication (TFA) adds an additional layer of security to your SFA account. After entering your username and password, Duo requires you to verify your identity before access is granted.

Stephen F. Austin State University uses Duo to protect university systems and data from unauthorized access, even if a password is compromised.

Why Two-Factor Authentication Is Required

Passwords alone are no longer sufficient to protect accounts. Phishing attacks, data breaches, and reused passwords can expose credentials without a user realizing it.

Duo adds a second verification step that confirms it is really you signing in, significantly reducing the risk of account compromise.

How Duo Authentication Works

After you enter your SFA username and password, Duo adds a second step to verify your identity.

Example of the Duo authentication flow after signing in.

Duo Verified Push (Primary Method)

Duo Verified Push is the primary authentication method used at SFA. When you attempt to sign in, a push notification is sent to the Duo Mobile app on your enrolled device.

• You receive a push notification in Duo Mobile
• You enter the displayed verification number
• You approve the login request

Duo Hardware Tokens

Hardware tokens are available for users who cannot use Duo Mobile. These tokens generate a one-time passcode that is entered during login.

Hardware tokens are issued by SFA when needed and are not the default authentication method. Availability is determined based on individual access needs.

Related Duo Articles

• Using Duo Verified Push
• Using a Hardware Token for Duo Authentication
• Managing Your Devices in Duo

Need Help?